fluentd-kubernetes-sumologic with self-signed certificate

Follow

Ian Singh

• April 26, 2017 22:21

How do i use the fluentd.daemonset.yaml on a kubernetes-HA setup with self-signed master certificates? I am seeing this in the fluentd container logs: 2017-04-26T22:17:54.834724228Z 2017-04-26 22:17:54 +0000 [error]: config error file="/fluentd/etc/fluent.conf" error="Invalid Kubernetes API v1 endpoint https://10.0.0.1:443/api: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed" Does the service account (and associated secret mounts) need to be set up? Which namespace does this run in, kube-system, or doesn't matter. Thanks! -Ian

0

• 

  Ian Singh

  • May 03, 2017 18:20

  Figured it out, it was because i disabled ServiceAccount from the admissions control of the apiserver, after that i needed to delete the token secret from the "default" namespace, and reload the daemon set...

  -1

  Comment actions Permalink
• 

  Mario Sanchez

  • May 09, 2017 20:19

  Thanks for posting the answer @Ian Singh . I learned something today. Cheers,Mario

  0

  Comment actions Permalink

Please sign in to leave a comment.